Malicious Software Removal Tool - Updates

[Cheemag]

Hello.
Windows 7 (Pro 64-bit) keeps offering me updates for this. I don't use it as I have a paid-for 3rd party security app.

Where is it hidden (I can't find it on the machine) and how can I stop Windows offering updates for it?

Regards,

Cheemag

 

[derekimo]

You can type mrt.exe in the start menu, or go to,

C:\Windows\System32 and find the MRT.exe

 

[Cheemag]

Derekimo wrote:

>You can type mrt.exe in the start menu, or go to
>
>C:\Windows\System32 and find the MRT.exe 4 Hours Ago 05:42 AM

... and delete it. Thanks. I'll do that next time I boot that machine.

 

[derekimo]

You can type mrt.exe in the start menu, or go to,

C:\Windows\System32 and find the MRT.exe

Derekimo wrote:

>You can type mrt.exe in the start menu, or go to
>
>C:\Windows\System32 and find the MRT.exe 4 Hours Ago 05:42 AM

... and delete it. Thanks. I'll do that next time I boot that machine.

I didn't say anything about deleting it.

If you don't want the updates for it, just right click on them and select "Hide"

 

[Anak]

MRT is just an enhancement to any of the anti-malware products you may already have installed and rarely if ever causes conflicts.

The only time I've seen an alert from an already installed anti-malware product was when MRT found a virus on a machine I was working on that the resident anti-malware program failed to find, when MRT did, it woke up the resident.

MRT resides where derekimo showed, and a log can be found at:

C:\Windows\debug

See:

   Information

The Microsoft Safety Scanner is a free portable downloadable standalone EXE security tool that provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.

The Microsoft Safety Scanner expires 10 days after being downloaded. To rerun a scan with the latest anti-malware definitions, download and run the Microsoft Safety Scanner again.

The Microsoft Safety Scanner is not a replacement for using an antivirus software program that provides ongoing protection.

For real-time protection that helps to guard your home or small business PCs against viruses, spyware, and other malicious software, download the free Microsoft Security Essentials

Source: SevenForums Tutorials http://www.sevenforums.com/tutorials/157118-microsoft-safety-scanner.html | SevenForums Tutorials

The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running supported versions of Windows

What you don't know about the Windows Malicious Software Removal Tool | Computerworld Blogs

 

[Cheemag]

You can type mrt.exe in the start menu, or go to,

C:\Windows\System32 and find the MRT.exe

Derekimo wrote:

>You can type mrt.exe in the start menu, or go to
>
>C:\Windows\System32 and find the MRT.exe 4 Hours Ago 05:42 AM

... and delete it. Thanks. I'll do that next time I boot that machine.

I didn't say anything about deleting it.

If you don't want the updates for it, just right click on them and select "Hide"

No you didn't, so what did you intend that I do with MRT.EXE when I'd found it ?

In any case there is no MRT.EXE on my machine - in system32 or anywhere else.

Windows Defender was 'manual' in services.msc, it's now disabled. I've just rebooted and it hasn't tried to push the update. I assume WMSRT is part of that. It comes up with the updates so soon after boot that I believe its source is the OS and not Microsoft.

We shall see.

 

[Cheemag]

Anak wrote:

>MRT is just an enhancement to any of the anti-malware products you may already have installed and >rarely if ever causes conflicts.
>
>The only time I've seen an alert from an already installed anti-malware product was when MRT found a >virus on a machine I was working on that the resident anti-malware program failed to find, when MRT did, >it woke up the resident.
>
>MRT resides where derekimo showed,

It doesn't - not on my machine. It isn't on the machine anywhere.
>
>and a log can be found at: c:\Windows\Debug

There's only a zero-length passwd.log file in there and a \wia directory with one log referring to Epson.

 

[derekimo]

You can type mrt.exe in the start menu, or go to,

C:\Windows\System32 and find the MRT.exe

Derekimo wrote:

>You can type mrt.exe in the start menu, or go to
>
>C:\Windows\System32 and find the MRT.exe 4 Hours Ago 05:42 AM

... and delete it. Thanks. I'll do that next time I boot that machine.

I didn't say anything about deleting it.

If you don't want the updates for it, just right click on them and select "Hide"

No you didn't, so what did you intend that I do with MRT.EXE when I'd found it ?

Just answering your original question.

Where is it hidden (I can't find it on the machine) and how can I stop Windows offering updates for it?

I have Win 7 Pro 64bit as well and it is located where I said on mine.

View attachment 273794

If you haven't installed the update, that may be why you can't find it.

 

[Cheemag]

It's possible I've missed the update, but is there any point in getting hold of it now ?

It doesn't appear possible to hide this update - there's no facility in that update dialogue to hide it.

 

[derekimo]

It's possible I've missed the update, but is there any point in getting hold of it now ?

It doesn't appear possible to hide this update - there's no facility in that update dialogue to hide it.

Right clicking on the update and selecting "Hide" doesn't work?

Does it say it has finished downloading on the right side, details pane?

 

[Layback Bear]

MRT.exe is KB890830 6/11/2013 you either have it or you don't. If you don't their will be a new one next month.

Cheemag please put what anti virus and firewall you are using in your specs.

 

[NoelDP]

The MSRT is re-issued in a new version every month - which is why hiding it only works for a month.

It is purely an on-demand scanner - not a real-time scanner or preventive AV.

Just let it install/run every month.

 

[Cheemag]

It was written by two responders:

MRT.exe is KB890830 6/11/2013 you either have it or you don't. If you don't their will be a new one next month.

I'll see if I can find that KB.

Cheemag please put what anti virus and firewall you are using in your specs.

I have Bitdefender Internet Security 2013.

-----------------------

The MSRT is re-issued in a new version every month - which is why hiding it only works for a month.

It is purely an on-demand scanner - not a real-time scanner or preventive AV.

Just let it install/run every month.

It comes up every 24 hours, not every month.

I think the best thing I can do is just to hit the [X] on the popup. That gets rid of it for a day.

 

[NoelDP]

If the MSRT is re-appearing that often, I doubt that it's running at all - which is cause for concern.
It could mean that the system is infected.

You should post in the Security/Malware removal forum and get your system checked thoroughly.

 

[Cheemag]

>If the MSRT is re-appearing that often, I doubt that it's running at all - which is cause for concern.
>It could mean that the system is infected.
>
>You should post in the Security/Malware removal forum and get your system checked thoroughly.

I'm pretty sure it isn't infected. MWB is run every few days and Vipre after any odd behaviour. Neither of them ever find anything.

I'll see what I can find in the Control Panel which may relate to this nuisance.

 

[Anak]

From what I been reading all you've done with the MSRT is either tried to hide it or delete it, you haven't tried to run it.

• Q27: How do I prevent this tool from being offered to me by using Windows Update or Automatic Updates?

A27: When you are first offered the Malicious Software Removal Tool through Windows Update or Automatic Updates, you can choose to decline downloading and running the tool by declining the EULA.

This decline can apply to just the current version of the tool or to both the current version of the tool and any future versions, depending on the options you choose.

If you have already accepted the EULA and if you would prefer not to install the tool through Windows Update, click to clear the check box that corresponds to the tool in the Windows Update UI.

Source: http://forums.speedguide.net/Microsoft Windows Malicious Software Removal Tool!

It sounds like you have to run MSRT and when you get to the EULA, pick the options you want, clear the default acceptance of running MSRT and then OK/Yes to anything to back your way out to close the installation.

I'm not sure it goes that way because I've always ran it automatically, so you will need to watch what is being offered. It may even have the options at the bottom of the EULA with the accept/decline boxes outside the scrolling EULA window.

 

[Cheemag]

All is now clear to me after a bit of research.

This tool is a 'Tuesday' update which apparently will offer itself until it's been accepted.

It runs automatically once a month to look for some of the more common malware although a scan can be initiated at any time by typing 'MRT' into a command prompt.

I've accepted it, run it and we can now close this thread.

Thanks to all who responded.